summaryrefslogtreecommitdiff
path: root/policy/modules/apps/qemu.if
diff options
context:
space:
mode:
Diffstat (limited to 'policy/modules/apps/qemu.if')
-rw-r--r--policy/modules/apps/qemu.if3
1 files changed, 3 insertions, 0 deletions
diff --git a/policy/modules/apps/qemu.if b/policy/modules/apps/qemu.if
index d258f1d0..71f24230 100644
--- a/policy/modules/apps/qemu.if
+++ b/policy/modules/apps/qemu.if
@@ -149,6 +149,7 @@ template(`qemu_domain_template',`
allow $1_t self:shm create_shm_perms;
allow $1_t self:unix_stream_socket create_stream_socket_perms;
allow $1_t self:tcp_socket create_stream_socket_perms;
+ allow $1_t self:tun_socket create;
manage_dirs_pattern($1_t, $1_tmp_t, $1_tmp_t)
manage_files_pattern($1_t, $1_tmp_t, $1_tmp_t)
@@ -190,6 +191,7 @@ template(`qemu_domain_template',`
sysnet_read_config($1_t)
userdom_use_user_terminals($1_t)
+ userdom_attach_admin_tun_iface($1_t)
optional_policy(`
samba_domtrans_smbd($1_t)
@@ -199,6 +201,7 @@ template(`qemu_domain_template',`
virt_manage_images($1_t)
virt_read_config($1_t)
virt_read_lib_files($1_t)
+ virt_attach_tun_iface($1_t)
')
optional_policy(`